Probably you've got attacked by a hacker, so I suggest you to audit your IT infrastructure since the time you've spotted this computer activity, may be he created some new users with admin rights or made other suspicious changes, also I suggest you to change all domain admins passwords to more complex.